998 matches found
CVE-2020-35752
The CVE-2020-35752 entry concerns Baby Care System 1.0 with a cross-site scripting (XSS) flaw in the Edit Page tab, exploitable via the Post title parameter. The root cause is insufficient input sanitization/validation on the post title that allows injected scripts to be processed in the page con...
Sourcecodester baby-care-system-phpmysqli-full-source-code 跨站脚本漏洞
Sourcecodester baby-care-system-phpmysqli-full-source-code is a Sourcecodester open source application. Used to manage infant health care. A cross-site scripting vulnerability exists in baby-care-system-phpmysqli-full-source-code 1.0, which is affected by a cross-site scripting XSS vulnerability ...
Sourcecodester Baby Care System File Upload Vulnerability
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. It provides a baby care system. Sourcecodester Baby Care System is vulnerable to a file upload vulnerability that could be exploited by an attacker to cause execution of commands and gain contr...
Baby Care System SQL Injection Vulnerability
Baby Care System is a heartbeat and temperature detection system. Baby Care System v1.0 is susceptible to SQL injection attacks. The vulnerability stems from the contentsectionpage.php page not filtering user input for SQL injection, which can be exploited by attackers to obtain database...
CVE-2021-25780
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell...
CVE-2021-25779
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page...
Privilege escalation
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell...
Sql injection
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page...
CVE-2021-25780
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell...
CVE-2021-25779
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page...
CVE-2021-25780
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell...
CVE-2021-25780
CVE-2021-25780 affects Baby Care System 1.0. The vulnerability is an arbitrary file upload in posts.php that allows uploading content (including PHP files) to the server, enabling command execution and a shell. The available documents confirm the vulnerable component (posts.php) and the impact (r...
CVE-2021-25779
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page...
CVE-2021-25779
CVE-2021-25779 affects Baby Care System v1.0. The vulnerability is an SQL injection in contentsectionpage.php via the id parameter due to insufficient input handling (no filtering). Impact per sources includes the ability for an attacker to execute arbitrary SQL commands on the affected system. S...
Sourcecodester Baby Care System SQL注入漏洞
Baby Care System is a heartbeat and temperature detection system. Baby Care System v1.0 is susceptible to SQL injection attacks. The vulnerability stems from the contentsectionpage.php page not filtering user input for SQL injection, which can be exploited by attackers to obtain database...
Sourcecodester Baby Care System 代码问题漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. It provides a baby care system. Sourcecodester Baby Care System is vulnerable to a file upload vulnerability that could be exploited by an attacker to cause execution of commands and gain contr...
Hamilton-medical Hamilton-T1 Information Disclosure Vulnerability
The Hamilton-medical Hamilton-T1 is an industrial control device from Hamilton-medical USA. It combines the functionality of a full-featured ICU ventilator with the compactness and ruggedness required for transport Features. An information disclosure vulnerability exists in the Hamilton-T1...
SQL Injection Vulnerability in Monthly Care ERP Management Platform of Wuhan Jin Tongfang Technology Co.
Wuhan Jin Tongfang Technology Co., Ltd. is a company that provides informatization solutions for the mother and child service industry. There is a SQL injection vulnerability in the monthly care ERP management platform of Wuhan Golden Tongfang Technology Co. Ltd, which can be exploited by attacke...
Sourcecodester Online Health Care System SQL Injection Vulnerability
Sourcecodester Online Health Care System is a Php-based website builder for online health checkups from Sourcecodester, Inc. Online Health Card System 1.0 suffers from a SQL injection vulnerability that originates from a database application that lacks validation of externally entered SQL...
